Overview

overview

9

Static

static

7

72a48b0d67...0N.exe

windows7-x64

9

72a48b0d67...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    72a48b0d677554d4b929fbeaec6cd290N.exe

  • Size

    70KB

  • Sample

    240906-aflkhavhll

  • MD5

    72a48b0d677554d4b929fbeaec6cd290

  • SHA1

    a46588628a712c6701ce256d57dc6b366b42baa5

  • SHA256

    6b4aa04aca9358ca0e000bb6ce2e53d6a5c31276d6f448a7be1cffd0dc271245

  • SHA512

    b6ef5982f549e37053d977b9163321c058f5bcf3e57e7473044d7d59777b11cc3f21571056c4e7bc8bb6ee161722c2f4f8b7e31051cae4cc2ec7c940c68f5d53

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8zxY5a8hk7:KQSox5a8E

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      72a48b0d677554d4b929fbeaec6cd290N.exe

    • Size

      70KB

    • MD5

      72a48b0d677554d4b929fbeaec6cd290

    • SHA1

      a46588628a712c6701ce256d57dc6b366b42baa5

    • SHA256

      6b4aa04aca9358ca0e000bb6ce2e53d6a5c31276d6f448a7be1cffd0dc271245

    • SHA512

      b6ef5982f549e37053d977b9163321c058f5bcf3e57e7473044d7d59777b11cc3f21571056c4e7bc8bb6ee161722c2f4f8b7e31051cae4cc2ec7c940c68f5d53

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8zxY5a8hk7:KQSox5a8E

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (367) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks